CVE-2026-22738-POC

CVE-2026-22738 — SpEL Injection RCE in Spring AI SimpleVectorStore Unauthenticated remote code execution via Spring Expression Language SpEL injection in SimpleVectorStore.similaritySearch. Affected Versions Artifact| Vulnerable| Fixed ---|---|--- org.springframework.ai:spring-ai-core| 1.0.0 –...

Using Your Own Embeddings in Spring AI 2.1

VectorStore.add takes text documents, generates embeddings with the store's configured model, and saves both. Spring AI 2.1 adds upsert for applications that already have embeddings or generate them from images, video, or audio. It accepts documents paired with application-supplied vectors, witho...